$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft File: 781285AE1A8C595D354913D0B93F6982FCDFD898.mft (raw, json) Hash identifier: XJlZGw1k6TzjwKPwvZ1aXx4/kw1GCIbUCRAydR9oJlQ= Subject key identifier: 03:55:32:9C:45:D1:9C:B7:6E:C5:52:31:DF:44:B9:F7:76:54:59:42 Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98 Certificate issuer: /CN=781285AE1A8C595D354913D0B93F6982FCDFD898 Certificate serial: 6CA810E28663B36E13EAEE196930F6A9F721CD59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft Manifest number: 01A0 Signing time: Sat 06 Sep 2025 02:31:09 +0000 Manifest this update: Sat 06 Sep 2025 02:26:09 +0000 Manifest next update: Tue 09 Sep 2025 07:24:09 +0000 Files and hashes: 1: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: rVykKz8Sijcwgrjh36jl66i5jYhje07nNSzwkGxxcIo=) 2: 781285AE1A8C595D354913D0B93F6982FCDFD898.crl (hash: Okyf7suGRSOv7lql4ekKDDiThxWgMeev+Drs5afnQfE=) 3: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: 2BdVqKJM7wkCXb7z3xWM42z8nq2M+ZXCEKBrPXEyNn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 07:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a8:10:e2:86:63:b3:6e:13:ea:ee:19:69:30:f6:a9:f7:21:cd:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898 Validity Not Before: Sep 6 02:26:09 2025 GMT Not After : Sep 9 07:24:09 2025 GMT Subject: CN=0355329C45D19CB76EC55231DF44B9F776545942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:f3:e6:c0:57:46:eb:ec:ec:e2:61:0c:f3: 32:f6:e1:cf:94:49:e2:76:a0:6e:8b:98:f0:c0:01: 5f:b4:92:07:39:9f:d4:30:fe:12:9e:42:f3:33:6b: 97:03:53:48:cf:8b:c4:2b:a2:e7:66:2d:89:ad:ed: e2:18:f5:8c:94:42:b2:d8:13:39:36:09:26:16:48: 22:55:d2:b2:a2:34:db:29:da:9a:d9:72:44:bc:73: d5:49:e4:57:c6:ef:66:f8:0e:8b:96:7b:33:22:46: 0f:d8:dd:ec:c8:fb:b0:34:d2:a1:d2:e0:ff:e9:e2: ec:b6:0f:1d:aa:73:5c:e4:e7:57:32:fa:b2:3b:e8: e5:ba:0f:0e:ad:6f:cc:f0:6f:d4:17:11:36:63:f2: 80:7a:24:e0:b0:6c:b1:20:1e:cc:81:a2:07:9d:9f: d0:df:a8:3e:f5:5a:85:60:15:d3:88:aa:17:69:3e: 32:0b:ed:50:e3:f4:47:89:d5:f0:6c:d3:2f:7c:d3: 61:bb:c1:29:4a:09:ab:e5:b0:c1:c2:8e:6a:00:0a: cb:96:69:05:01:75:86:cc:d5:b8:84:0e:48:18:81: 8c:8a:95:63:51:ee:c1:47:d8:5f:f9:4d:0d:e9:ed: 37:b7:aa:67:8a:92:97:8f:04:84:29:3c:63:c3:9c: 27:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:55:32:9C:45:D1:9C:B7:6E:C5:52:31:DF:44:B9:F7:76:54:59:42 X509v3 Authority Key Identifier: keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3c:04:6d:0d:5d:25:d0:2b:04:d9:9e:1d:29:c9:56:8e:79: c2:c7:86:9c:e0:44:fc:71:d0:46:07:c1:fb:59:06:d7:84:01: a9:32:65:98:0e:57:08:31:75:2d:5e:55:66:5f:f8:5f:dd:17: 4c:c2:d5:ea:38:72:b1:ff:b8:19:b6:a9:d1:aa:c1:bd:3d:9f: 16:28:88:d4:9b:7f:a2:34:1a:ed:1e:e0:92:fc:ba:14:8b:d6: 0e:b5:4f:14:86:68:d6:e6:1e:4d:45:10:b0:d9:7b:32:b6:40: a6:b6:01:c0:f1:25:b6:2e:a6:ef:3e:00:66:68:ea:00:62:1b: a0:cf:15:43:9a:11:8a:70:a1:6f:da:1f:d9:ff:41:48:e1:0c: 22:fa:c6:a9:98:bc:54:e1:66:53:6d:30:e3:20:d2:e7:b9:f2: 82:ec:24:87:81:4b:b4:e3:50:b1:f6:64:57:e8:2c:21:68:fd: 27:f9:72:fd:7c:31:ca:01:d7:8b:b1:74:80:14:c7:72:53:87: 8f:a3:0c:17:5d:51:e4:30:a5:34:5d:ac:c2:0c:b2:1d:f3:d0: 17:17:ee:96:44:88:2f:53:8b:ac:40:cf:41:28:15:b1:7b:4b: b6:20:89:3f:42:d7:25:bc:eb:03:65:3f:63:b7:c0:3c:12:c5: 23:ac:68:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbKgQ4oZjs24T6u4ZaTD2qfchzVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJG Q0RGRDg5ODAeFw0yNTA5MDYwMjI2MDlaFw0yNTA5MDkwNzI0MDlaMDMxMTAvBgNV BAMTKDAzNTUzMjlDNDVEMTlDQjc2RUM1NTIzMURGNDRCOUY3NzY1NDU5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDPPmwFdG6+zs4mEM8zL24c+U SeJ2oG6LmPDAAV+0kgc5n9Qw/hKeQvMza5cDU0jPi8QroudmLYmt7eIY9YyUQrLY Ezk2CSYWSCJV0rKiNNsp2prZckS8c9VJ5FfG72b4DouWezMiRg/Y3ezI+7A00qHS 4P/p4uy2Dx2qc1zk51cy+rI76OW6Dw6tb8zwb9QXETZj8oB6JOCwbLEgHsyBoged n9DfqD71WoVgFdOIqhdpPjIL7VDj9EeJ1fBs0y9802G7wSlKCavlsMHCjmoACsuW aQUBdYbM1biEDkgYgYyKlWNR7sFH2F/5TQ3p7Te3qmeKkpePBIQpPGPDnCf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA1UynEXRnLduxVIx30S593ZUWUIwHwYDVR0j BBgwFoAUeBKFrhqMWV01SRPQuT9pgvzf2JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mjc1ZmQ3Ni1lOGVlLTQ2YzgtOWQ4Mi1iNzM1YjlmNzA0MzEvMC83ODEyODVBRTFB OEM1OTVEMzU0OTEzRDBCOTNGNjk4MkZDREZEODk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJGQ0RG RDg5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI3NWZkNzYtZThlZS00NmM4LTlk ODItYjczNWI5ZjcwNDMxLzAvNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5 ODJGQ0RGRDg5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAo8BG0NXSXQKwTZnh0pyVaOecLHhpzgRPxx 0EYHwftZBteEAakyZZgOVwgxdS1eVWZf+F/dF0zC1eo4crH/uBm2qdGqwb09nxYo iNSbf6I0Gu0e4JL8uhSL1g61TxSGaNbmHk1FELDZezK2QKa2AcDxJbYupu8+AGZo 6gBiG6DPFUOaEYpwoW/aH9n/QUjhDCL6xqmYvFThZlNtMOMg0ue58oLsJIeBS7Tj ULH2ZFfoLCFo/Sf5cv18McoB14uxdIAUx3JTh4+jDBddUeQwpTRdrMIMsh3z0BcX 7pZEiC9Ti6xAz0EoFbF7S7YgiT9C1yW86wNlP2O3wDwSxSOsaHA= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:28 2025 by rpki-client